What you will learn
- Work out the real processing time for an authorisation, not the advertised one.
- Separate the expiry, the cancellation deadline and the renewal lead time.
- Set a lead time you can defend to an auditor.
Thirty days is the default lead time in almost every tool, and it is wrong for most obligations. It is not wrong because thirty is a bad number. It is wrong because it is the same number for a software seat you can renew in an afternoon and a regulatory permit that takes a quarter.
The lead time is not a reminder preference
A reminder preference is about how much warning a person wants. A lead time is a fact about the outside world: how long the process actually takes once you start it. If the process takes twelve weeks and you start at thirty days, you are non-compliant for six weeks no matter how diligent everybody is.
So the question to ask is never how much notice do you want. It is: if we started today, when would the new certificate be in our hands?
Measure it from your own history
The published turnaround from an authority is the best case, on a complete application, in a quiet month. Your own history is better evidence. For each obligation kind, find the last three renewals and measure from the date you started to the date the new certificate was issued.
- Take the longest of the three, not the average — you are sizing for the bad case.
- Add the time it takes you internally to get a purchase order or a signature.
- Add the queue: if the renewal lands in a month when your one qualified assessor is on leave, that is part of the real number.
- Round up to a whole week. Precision you do not have is false comfort.
For a first-time obligation with no history, ask the issuing body and then add half again. You can tighten it after the first real renewal, and the cost of being early is an email nobody minds.
Three dates, not one
Once the lead time is real, it becomes obvious that it is a separate date from the expiry, and that a third date often matters too:
- Expiry: the day you become non-compliant. Non-negotiable, set by the certificate.
- Renewal start: expiry minus the lead time. The day the work has to begin.
- Cancellation deadline: for contracts, the day after which it silently rolls over for another term.
These land on different days and frequently on different people. The renewal start belongs to whoever does the paperwork; the cancellation deadline usually belongs to whoever owns the budget. Modelling them as one date means one of those two never gets told.
The expensive failures are not the ones you see coming thirty days out. They are the twelve-week process started at day thirty.
Write down why
Record the reasoning next to the number — that this kind takes eight weeks because the last three took six, seven and eight. It takes a minute, and it converts the lead time from somebody's preference into a decision with evidence behind it. When an auditor asks why your process starts when it does, that sentence is the answer.
If you remember four things
- 1Ask when the new certificate would be in hand, never how much notice someone wants.
- 2Size from the longest of your last three renewals, plus internal delay, rounded up to a week.
- 3Keep expiry, renewal start and cancellation deadline as three separate dates.
- 4Record the reasoning behind the number — it is what makes it defensible later.